CVE-2026-55858 mariadb-corporation CVE debrief

Who should care

Defenders responsible for Java applications using MariaDB or MySQL databases with MariaDB Connector/J should assess exposure and apply patches. This includes developers, database administrators, and IT security teams.

Why it matters

CVE-2026-55858 is a vulnerability in MariaDB Connector/J that can lead to silent data corruption due to a character encoding mismatch between the client and server. Defenders should prioritize assessing exposure and applying patches for versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9. The issue arises when the connector and server have different character set configurations, potentially causing data corruption or loss. Verification of character encoding configurations and patching or upgrading affected versions are crucial defensive actions.

• Data corruption due to character encoding mismatch
• Potential for silent data loss or modification
• Need for verification of character encoding configurations
• Priority for patching or upgrading affected connector versions

Technical summary

MariaDB Connector/J versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9 are vulnerable to a character encoding mismatch issue. The connector assumes a UTF-8 connection character set but does not properly handle changes to this setting during a session, which can lead to silent data corruption. The issue arises when the connector and server have different character set configurations, potentially causing data corruption or loss. Defenders should prioritize assessing exposure and applying patches for MariaDB Connector/J versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Defensive priority

Defenders should prioritize assessing exposure and applying patches for MariaDB Connector/J versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Recommended defensive actions

• Assess exposure of MariaDB Connector/J deployments to determine if versions prior to 2.7.14, 3.3.5, 3.4.3, or 3.5.9 are in use.
• Apply patches or upgrades to affected versions of MariaDB Connector/J.
• Verify character encoding configurations for MariaDB Connector/J and associated servers to ensure consistency.
• Monitor for unusual data corruption or errors that could indicate exploitation.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but the scope of affected versions and deployments requires verification. Affected versions include those prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9. Defenders should verify character encoding configurations for MariaDB Connector/J and associated servers to ensure consistency. The vulnerability can cause silent data corruption due to character encoding mismatch between the client and server.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.